MAL-2025-70242 Malicious code in redundant-amethyst-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ee274d8d379fcb47e73967a3ed7b93d0f3f6febddd5fa80af85eb6da54912f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67306 Malicious code in colourful-purple-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158b37429a7213b960d9bf65fd7cfadda73e3ef325c432ced804025186d9c4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68111 Malicious code in everyday-gray-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84cde693425690af223f70b83f31d6e8fa0b862eaac864ce9695fb7bf9ef2a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69616 Malicious code in nice-copper-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7178d967b042fd09ade3d97ff36884b6c2c094b8bbbe4ff710f567361325c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68285 Malicious code in favourable-olive-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43c1629bfa5aad124c27f6bc0b8ddeb68f69c3283cda5c0c91f70731cd72f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64376 Malicious code in mulyono-teh47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e74ac4829581c45e9890dd9dae059ef67a053fed250dcfb7a06ef0f56ac3f56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64836 Malicious code in purring_reptile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8005870648f676cf0fe122d6f3f5547dc4f59317b4bc35289aaf79d6fd3627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60219 Malicious code in curly_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb5b749d2113b8332ee878a2f40305f76a2022641d42dd4ba474faf7b3bd4836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kue88-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d8ad392ce43f03e52173d96f6983be49ff52a589fb34bd803612492081116e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58894 Malicious code in tasteless_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7ec44286e394864b7709f2fd0db32fa861f0084d7bc08638381fd511bc28cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58867 Malicious code in tania-lapis32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced762ffa17c561f3829c7f3a270309e2a903965cf13d6408d47706986ae8948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54903 Malicious code in siska-gembus49-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f6ad97907b6c0558c865bc8b6cbbbd79d7f9b201425043ee2d398ad4a596f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53815 Malicious code in lina-lupis32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4fb71b8a944d7c87d97cff1ca7cbf820895b90a4b64a87ab42f9c23bf32044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-otak-otak39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4e71d58f358cafc93233270e818a1222c0a5636c7769424f19ace7e368c040 The package dewi-otak-otak39-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51588 Malicious code in dono-gaplek67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f856d2917110e1bb645849376d8d0cd1bfa11c1cb292af8652e960895612e7f The package dono-gaplek67-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50752 Malicious code in ade-moci61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3564ff73a0082f163d555e4c3e77a7956ffe721c0e3e960499ac7b00757f055 The package ade-moci61-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-51801 Malicious code in fadhil-mieaceh6-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866d73d45e7f80632bb01daf667673065c16eb899d8bb91d11fff8a7d43f95b4 The package fadhil-mieaceh6-devapp was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51526 Malicious code in dewi-papeda26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb6b18c62287a961f728d41dfdc11e20f02f6a253e3f2b0d9b819e45fa9e8d9 The package dewi-papeda26-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

CVE-2025-55278

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

EUVD-2025-37960

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...